Draft RFQ 5000178352 CDSW Hadoop 82924.pdf

WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30.

5000178352 105

TBD TBD

Vanessa Rodgers

904-661-3559

2050 100

IRS Procurement - Tier 2/3, Management Branch 5000 Ellin Rd Lanham-Seabrook, MD 20706-1348 Attn: Vanessa Rodgers Email: vanessa.rodgers@irs.gov

JW Terry

513210

$47M

8/29/2024

9/12/2024

11:00 AM

Procurement-Tier 2/3, Tier Management Branch 5000 Ellin Rd Lanham-Seabrook, MD 20706-1348 Attn: JW Terry Tel: (937) 610-2123 Email: jw.r.terry@irs.gov

RFQ 5000178352

COMBINED SYNOPSIS/SOLICITATION

This notice is a Draft combined synopsis/solicitation for commercial supplies and service prepared in accordance with the format in Subpart 12, as supplemented with additional information included in this notice. This announcement does not constitute a solicitation; quotes are not being requested and a written solicitation will not be issued.

This solicitation number will be 5000178352 and may be issued as a Request for Quote (RFQ). This draft solicitation document incorporates all mandatory commercial item provisions and clauses that are in effect through Federal Acquisition Circular 2024-06 effective August 29, 2024.

This acquisition will be a 100% Small Business Set-Aside. Future offerors must have an active entity registration in the System for Award Management (SAM.gov).

This will be made as a Firm-Fixed Price, Single Award, solicited under North American Industry Classification System (NAICS) 513210, Software Publishers, with a business size of $47 Million.

FAR 52.212-1. Instruction to Offerors – Commercial Products and Commercial Services, applies to this acquisition.

Additional instructions have been provided herein.

FAR 52.212-2 is not incorporated into this draft solicitation.

Offerors shall include a completed copy of the provision at 52.212-3, Offeror Representations and Certifications – Commercial Products and Commercial Services, with its offer. Offeror shall complete and return all required provisions included in this solicitation once a final solicitation is posted.

FAR 52.212-4, Contract Terms and Conditions – Commercial Products and Commercial Services, applies to this acquisition. Additional Contract Terms and Conditions are included in Attachment 4 – Contract Clauses and Provisions.

FAR 52.212-5, Contract Terms and Conditions Required To Implement Statutes or Executive Orders-Commercial Products and Commercial Services applies and can be located in Attachment 4. Clauses applicable to this acquisition have been marked.

FAR 52.217-8, Option to Extend Services will be included in the contract.

Questions regarding the DRAFT RFQ must be submitted to Vanessa.Rodgers@irs.gov, on or before 11:00 am EST, Monday, September 09, 2024. Questions requiring a change to the RFQ will be done through an amendment to the solicitation via SAM.Gov. The Government reserves the right not to answer questions received past the date specified.

The Government may or may not release on the SAM.gov portal a Final RFQ at a later date where instructions will state delivery dates for quotes.

The Internal Revenue Service Office of Procurement intends to award one contract for the HPE Ezmeral, Ciphertrust, and Elastic Search licensing and maintenance to the offeror that represents the Best Value to the Government using a Lowest Priced Technically Acceptable (LPTA) evaluation procedures. In order to be technically acceptable vendor shall meet the evaluation factors set forth in this solicitation.

All communications shall be directed within the stated deadlines to the attention of:

Name: Vanessa Rodgers Title: Contract Specialist Vanessa Rodgers@irs.gov

Attachments

Attachment 1 – Pricing Section

Attachment 2 – Statement of Work

Attachment 3 – Representations and Certifications

Attachment 4 – Provisions/Clauses

Attachment 5 – FISMA Contract Language mailto:Vanessa.Rodgers@irs.gov mailto:Vanessa%20Rodgers@irs.gov

Attachment 6 – VPAT

Attachment 7 – Past Performance Questionnaire

1. The quote should be submitted in accordance with FAR 52.212-1 Addendum. The quote shall also include:

a. A completed “Pricing Section”. Quotes must provide the Line Items listed in “Pricing Section”, including Part Number (if applicable), List Price, any applicable discounted price, and the extended price.

b. Offer expiration date – The IRS requests the offeror's quote remain valid for a minimum period of 60 days from the date of submission.

c. 508 compliance statement disclosing that all supplies and/or services being offered shall be in compliance with Section 508 of the Rehabilitation Act.

d. Completed representations and certifications attachment.

e. Other than Certified Cost or Pricing Data: To assist the IRS in determining that the offeror’s prices are fair and reasonable, the offeror shall indicate which, if any, of the items being proposed are available via GSA Schedules. If applicable, please provide the GSA contract number and any applicable discounts off the GSA schedule pricing.

Additionally, the Offeror may submit commercial sales data to support any prices proposed in response to this solicitation. Providing this information will help facilitate the evaluation process and ensure compliance with Federal Acquisition Regulation (FAR) requirements for price reasonableness.

f. An executed SF1449

g. All offerors must submit their End User License Agreements with their quotes.

2. In accordance with FAR 19.704(d), the offeror shall submit a commercial subcontracting plan. If no subcontracting opportunities are anticipated for this effort, the offeror must provide a written determination supporting this conclusion.

3. How the quote will be evaluated:

1. TECHNICAL APPROACH / ABILITY TO PERFORM CONTRACT REQUIREMENTS

Technical Capability: The evaluation of technical capability will consider the vendor’s proven capability and resources proposed to provide the products and services required to fulfill this requirement. The Government will evaluate the vendor’s quote to ensure a clear understanding of the nature and scope of the work specified in the SOW is demonstrated. The vendor must submit a quote that fully demonstrates the ability to meet the SOW as required by the solicitation. Additionally, attachment 2 is part of the technical evaluation criteria.

Acceptable: The vendor demonstrated and met the technical capability requirements in the solicitation.

Unacceptable: The vendor does not demonstrate and meet the technical capability requirements in the solicitation.

2. PAST PERFORMANCE

A past performance evaluation will be conducted via submissions from vendor’s past related projects. The vendor shall provide information of no more than three (3) projects performed within the last three (3) years that are similar to this effort in terms of type, scope, complexity and size.

The vendor shall use the Past Performance Questionnaire (Past Performance Questionnaire - Attachment C) to provide the required information. Vendor shall send the Past Performance Questionnaire (Attachment C) to each reference. The vendor will then have the reference return the completed past performance questionnaire to Vanessa Rodgers at Vanessa.Rodgers@irs.gov.

Evaluation of past performance may be based upon past performance information contained in the Contractor Performance Assessment Reporting System (CPARS), and upon the completed questionnaires obtained from the technical competency and alternate references identified by the Offerors. CPARS has been established as a Government-wide performance system and serves as a central warehouse for performance assessment reports received from various Federal performance information collections systems. Based upon information contained in CPARS and in the technical competency and alternate references, the Government will evaluate Offerors’ relevant mailto:Vanessa.Rodgers@irs.gov corporate past performance managing contracts similar in size, scope and complexity to that contemplated by the solicitation. Past performance is relevant when an Offeror has been confronted with the kinds of challenges and risks contemplated by the solicitation. In order for the past performance to be considered recent, it must be performed within the past three (3) years. In the case of an Offeror without a record of relevant past performance or for whom information on past performance is not available, the Offeror may not be evaluated favorably or unfavorably on past performance.

All vendors are responsible for ensuring that Point of Contact’s (POC) and Alternate Point of Contact’s (APOC) are reachable and that all information provided is current and valid. Any past performance questionnaire submitted that does not match the past performance reference will not be contacted and will be considered not to be relevant.

Acceptable: Based on the offeror’s performance record, the Government has a reasonable expectation that the offeror will successfully perform the required effort.

Unacceptable: Based on the offeror’s performance record, the Government has no reasonable expectation that the offeror will be able to successfully perform the required effort.

3. PRICE EVALUATION

Quotes will be evaluated through Lowest Price Technically Acceptable (LPTA) procurement strategy. Award will be made to the technically acceptable Contractor whose quote being responsive to all solicitation requirements and offers the lowest price to the government.

Attachment 1

To be considered for award, the contractor must provide a firm fixed price quote for products listed below. Please fill in each column to be considered for award. Failure to fill in each column will make the contractor nonresponsive and will not be considered for award:

CLIN Company Part #

Description Qty Unit Discounted

Price

IRS

Extended Price

Total Price

Base Year - 9/28/2024 through 09/27/2025

ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

766 EA

HPE R9J51AAE

HPE Ezmeral Data Fab Cvg An Hadoop E- LTU Brand Name or Equal

EA

HPE R9J57AAE

Cvg Database E-LTU Brand Name or Equal

HPE R9J60AAE

Cvg Ev Stream E-LTU Brand Name or Equal 278

HPE R9J55AAE

Cvg SQL Drill E-LTU Brand Name or Equal 278

HPE R9J53AAE

Cvg Spark E-LTU Brand

HPE R9J62AAE

Port OS Plt E-LTU Brand Name or Equal 10

One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

One Identity BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 or Equal 1

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 or Equal

IRS

Extended Price

Option Year 1 - 9/28/2025 through 09/27/2026

Elastic Federal Platinum Subscription Brand Name or Equal

HPE Ezmeral Data Fab Cvg An Hadoop E-LTU Brand Name or Equal

Database E-LTU Brand

Ev Stream E-LTU Brand

SQL Drill E-LTU Brand

HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 1

One Identity Safeguard Privileged Sessions Module Per Host 24x7

0013 One Identity

BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1- Year Brand Name or Equal 656

Ciphertrust

976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

1009 One Identity 24x7 Maintenance Brand

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

IRS

Extended Price

Option Year 2 - 9/28/2026 through 09/27/2027

Elastic Federal Platinum Subscription Brand Name

Cvg Database E-

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Session Appliance 4000

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector

IRS

Extended Price

Option Year 3 - 9/28/2027 through 09/27/2028

Elastic Federal Platinum

Cvg Database E-LTU Brand Name or Equal

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Brand Name Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Session Appliance 4000

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector

IRS

Extended Price

Option Year 4 - 9/28/2028 through 09/27/2029

Elastic Federal Platinum

Cvg Database E-

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host 24x7

BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 100

4013 One Identity Maintenance Brand Name

One Identity Safeguard Session Appliance 4000

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

Attachment 2

STATEMENT OF WORK (SOW)

HPE Ezmeral, Ciphertrust, and Elastic Search Licensing and One Identity Maintenance

1. Introduction:

The Internal Revenue Service (IRS) Data Services Cyber Security Data Warehouse (CSDW) requires the procurement of HPE Ezmeral (formally known as MapR), Elastic Search, and Ciphertrust software licenses and One Identity Safeguard software maintenance (formally known as Balabit). This acquisition will refresh and expand upon the capability of the environment already in place. The environment’s goal is to implement a multilayered defense architecture which will deliver the IRS Cybersecurity organization the ability to quickly focus energy on detecting and preventing both internal and external cyber threats. In addition, the Hadoop environment will provide the Data Services Warehouse team benefits in reducing time spent preparing data, exploring data, and building analytical models.

2. Background:

The Internal Revenue Service (IRS) has invested significant resources in securing their Information

Technology (IT) Infrastructure and protecting its critical data. Part of the infrastructure includes CSDW computing and storage technology that supports log collection and analysis to secure the enterprise and prevent fraudulent activity.

3. Scope of Work:

The vendor shall furnish HPE Ezmeral, Elastic Search, and Ciphertrust software licenses and One Identity Safeguard software maintenance as specified by the Government throughout the contract’s base Period of Performance and any exercised Option periods.

Item# Company Part #

Description Qty

Base Year - 9/28/2024 through 09/27/2025

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

HPE Ezmeral Data Fab Cvg An Hadoop E-LTU Brand

0003 HPE

R9J57AAE

HPE Ezmeral Data Fab Cvg Database E-LTU Brand

0004 HPE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand

Item #

Company Part #

Option Year 1 - 9/28/2025 through 09/27/2026

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Nam or Equal e 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Item # Company Part #

Option Year 2 - 9/28/2026 through 09/27/2027

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Nam or Equal e 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Option Year 3 - 9/28/2027 through 09/27/2028

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Brand Name Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Option Year 4 - 9/28/2028 through 09/27/2029

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Salient Characteristics

The following are the minimum requirements that Elastic components or equivalent product need to provide:

• Store data such as Personally identifiable information (PII) and Non PII data form web proxies, syslog servers, firewalls, and email gateways locally for fast queries or remotely on low-cost S3 for unlimited data.

• Simplifies the collection and management of logs such as proxies, syslog servers, firewalls, and email gateways, metrics, and all other monitoring data.

• Analyze current and historical performance trends for each infrastructure component with logs, processes, application performance, anomalies and metadata in context.

• An application with the capability to provide real user monitoring transactions that can easily be isolated. Review associated logs, metrics, and traces to connect the dots. Correlate activity and resolve performance issues within 24 -48 hours in complex cloud configurations.

The following are the minimum requirements that HPE Ezmeral components or equivalent product need to provide:

• A scalable, secure, enterprise-grade platform that can be deployed across multiple data centers and clouds environments. Requiring an infrastructure platform purpose-built for Big Data and/or AI (Artificial intelligence) applications—including data science, analytics, machine learning (ML), and deep learning (DL)—using enterprise-grade security, networking, and support for a variety of local and remote storage options.

• A product that deploys and run non-cloud-native monolithic applications in containers without rearchitecting or refactoring them.

• Flexibility to deploy on bare-metal or virtualized infrastructure, on-premises, in the cloud.

• Pre-integrated with persistent container storage.

• A product that is fast, easy deployment within less than 30 days, management, and monitoring of Kubernetes clusters with out-of-the-box configuration of networking, load balancing, and storage.

• A product that doesn’t require additional hardware and software components to acquire to import external Kubernetes clusters; includes support for importing clusters from cloud vendors such as Amazon EKS, Google GKE, and Azure AKS.

• Must support a RESTful API (Application Programming Interface).

• Must streamlines operations by using automation of customized log file scripts from various sources and reduces IT costs by automating provisioning, unifying management, and supporting push-button upgrades.

• Must supports three levels of High Availability (at the platform, virtual cluster, and/or Gateway node level) to provide redundancy and protection.

The following are the minimum requirements that One Identity components or equivalent product need to

• Full session audit, recording and replay.

• Real-time alerting and blocking

• Initiate workflows or deploy in transparent mode with no changes to users.

• Full text search including Optical Character Recognition

• Monitors questionable behaviors and uncovers previously unknown threats through trends in the log files from inside and outside of the organization.

• Automatically find privileged accounts on the network; supports host, directory, and network discovery.

• Generate and store secure passwords for all employees. Each product should contain a password tool that secures passwords from various applications.

The following are the minimum requirements that Cipher trust components or equivalent product need to

• Centrally manage encryption keys and configure security policies so organizations can control and protect sensitive data in the cloud, on-premises and across hybrid environments.

• Provide complete visibility into sensitive data on-premises and in the cloud with efficient data discovery, classification, and risk analysis.

• FIPS (Federal Information Processing Standards)140-2 compliant

• Multi-cloud key management

• Unparalleled partner ecosystem of KMIP (Key Management Interoperability Protocol) integrations

• Database encryption key management (Oracle TDE, big data, MS SQL, SQL Server Always Encrypted, etc.)

• Transparent encryption for files, databases, big data, and containers

• Application-layer data protection

• Tokenization with dynamic data masking

• Format preserving encryption.

• Static data masking

• Privileged user access controls

4. Tasks:

Service Level Maintenance Support for the Hadoop (Martinsburg/Memphis):

4.1 The maintenance services shall provide Enhanced Support Coverage on a 24x7x365 basis for software and operating system, technical support, and upgrades for all components of the deployed CSDW Upgrade and shall include the following:

• Telephone and email support centers

• Access to On-line e-support center for web support, online case management, and knowledge base.

• Access to patches, maintenance, and major releases of software updates;

• Shall meet Section 508 standards.

4.2 The Contractor shall provide all software release patches/bug fixes for purchased software covered and maintained under the contract at no additional charge to the IRS other than the Standard annual maintenance fee for the devices. All software releases and patches must be provided with appropriate supporting documentation in electronic or soft format. Maintenance fees will include a technical support option for on-site, phone, and on-line support.

4.3 Access to Government Property and Facilities:

Any required maintenance tasks required to be performed on-site in connection with the Email Gateway solution shall be performed at any of the following locations: Kearneysville, West Virginia and Memphis, Tennessee upon request of a trouble ticket placed through the customer service portal.

The Contractor shall abide by Department of the Treasury Directive (TD P) 15-71 regarding provisions for authorized entrance and exit at these facilities. When visiting a Government facility, the Contractor will be escorted at all times.

The Contractor may be subjected to search by Security personnel when visiting a Government facility.

The Contractor shall meet the following requirement for any on-site technical support personnel: U.S. Citizen or lawful

Permanent Resident Alien with at least three or more years of U.S. residency from the date of legal entry into the U.S.

5. Delivery Instructions:

The delivery date for the software is 30 days after the approval of the award. The vendor will provide electronic copies of all software to the following points of contact:.

IRS ECC-MEM

ATTN: Darryl Hudson, MOD K CSIRC West

Eric Smith, MOD K CSIRC West

5333 Getwell Road

Memphis, TN 38118

Late Deliverables:

Notice of Late Delivery: In the event the contractor anticipates difficulty in complying with the contract delivery schedule, the contractor shall immediately provide written notice to the CO and the COR. For any task order level deliverable, the contractor shall provide written notification immediately to the COR, with a copy to the CO. Each notification shall give pertinent details, including the date by which the contractor expects to make delivery; provided, that this data shall be informational only in character and that receipt thereof shall not be construed as a waiver by the

Government of any contract delivery schedule, or any rights or remedies provided by law or under this contract.

6. Place of Performance:

5333 Getwell Road

Memphis, TN 38118 and

250 Murall Drive

Keanrneysville, WV 25430-5200

7. Period of Performance:

The period of performance for the base year will be 09/28/2024 - 09/27/2025 with options as follows:

Option Period 1: 09/28/2025 - 09/27/2026 Option Period 2: 09/28/2026 - 09/27/2027 Option Period 3: 09/28/2027 - 09/27/2028 Option Period 4: 09/28/2028 - 09/27/2029

8. Government Furnished Property Access to Government property does not apply.

8.1 Government Furnished Information

Access to Government information does not apply.

9. Security Requirements N/A

10. Contract Administration Data

The Contracting Officer for this requirement is:

Internal Revenue Service Office of Procurement

Name: JW Terry Voice: 937-610-2123 Email: JW.R.Terry@irs.gov

Contract Specialist for this requirement is:

Internal Revenue Service Office of Procurement

Name: Vanessa Rodgers Voice: 904-661-3559 Email: Vanessa Rodgers@irs.gov

Contracting Officer’s Representative (COR) Point of Contact The COR Point of Contact for this order is listed below:

Internal Revenue Service Data Services Cyber Security Data Warehouse Name: Juan Acosta Phone: 240-412-5997 Email: juan.a.acosta@irs.gov

11. Technical Points of Contact:

Name: Darryl Hudson

5333 Getwell Road

Memphis, TN 38118

Email: Darryl.S.Hudson@irs.gov

12. Section 508 Compliance

Section 508 Information, Documentation and Support (DEC 2019)

In accordance with 36 CFR, Appendix C to Part 1194, the information and communication technology (ICT) (ICT) products and product support services documentation furnished in performance of this contract shall be provided at no additional cost. The contractor shall provide information, documentation, and support relative to the supplies and services as described in the statement of work.

The following technical standards and provisions have been determined to be applicable to this contract:

_X__ Chapter 6: Support Documentation and Services

_X__ 601 General

_X__ 601.1

_X__ 602 Support Documentation

_X__ 602.1 _X__ 602.2 _X__ 602.3 _X__ 602.4 mailto:juan.a.acosta@irs.gov mailto:Darryl.S.Hudson@irs.gov https://www.access-board.gov/ict/ https://www.section508.gov/buy/inventory-your-ict/

_X__ 603 Support Services

_X__ 603.1 _X__ 603.2 _X__ 603.3

(End of clause)

Section 508 Conformance (Apr 2024)

Each information and communication technology (ICT) product and/or product related service delivered under the terms of this contract, at a minimum, shall conform to the applicable accessibility standards at 36 CFR, Appendix C to Part

1194 at the level of conformance as specified in the Attachment entitled, “(Voluntary Product Accessibility Template

(VPAT)”

The following technical standards have been determined to be applicable to this contract:

___ Chapter 4: Hardware

___ 401 General

__ 401.1

___ 402 Closed Functionality

___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1

___ 405 Privacy

___ 405.1

___ 406 Standard Connections

___ 406.1

___ 407 Operable Parts

___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8

___ 408 Display Screens

___ 408.1 ___ 408.2 ___ 408.3

___ 409 Status Indictors

___ 409.1

___ 410 Color Coding

___ 410.1

___ 411 Audible Signals

___ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 _X__ 702.6 ___ 702.7 ___ 702.8 ___ 702.9

_X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__

302.9

(End of clause)

Section 508 Services (Apr 2024)

All contracts, solicitations, purchase orders, delivery orders and interagency agreements that contain a requirement of services which will result in the delivery of a new or updated information and communication technology(ICT) item/product must conform to the applicable provisions of the appropriate technical standards in 36 CFR, Appendix C to

Part 1194, and functional performance criteria in 36 CFR Chapter 3, unless an agency exception to this requirement exists at E202 General Exceptions.

The following technical standards and provisions have been determined to be applicable to this contract:

___ Chapter 4: Hardware

___ 401 General

___ 401.1

___ 402 Closed Functionality

___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1

___ 405 Privacy

___ 405.1

___ 406 Standard Connections

___ 406.1

___ 407 Operable Parts

___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8

___ 408 Display Screens

___ 408.1 ___ 408.2 ___ 408.3

___ 409 Status Indictors

___ 409.1

___ 410 Color Coding

___ 410.1 https://www.access-board.gov/ict/

___ 411 Audible Signals

___ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 ___ 702.6 ___ 702.7 ___ 702.8 ___ 702.9

_X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__

302.9

(End of clause)

IR1052.239-9003 Section 508 Accessibility of Information and Communication Technology (100% Compliance) (Dec 2019)

Each information and communication technology (ICT) product or service furnished under this contract shall comply with the Information and Communication Technology Accessibility Standards (36 CFR, Appendix C to Part 1194). If the Contracting Officer determines any furnished products or services are not in compliance with the contract, the Contracting Officer will apply the remedies described under FAR 52.246-2, Inspection of Supplies – Fixed Price or FAR 52.246-4, Inspection of Services – Fixed Price.

The following technical standards and provisions have been determined to be applicable to this contract:

___ Chapter 4: Hardware ___ 401 General ___ 401.1 ___ 402 Closed Functionality ___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5 ___ 403 Biometrics ___ 403.1 ___ 404 Preservation of Information Provided for Accessibility ___ 404.1 ___ 405 Privacy ___ 405.1 ___ 406 Standard Connections ___ 406.1 ___ 407 Operable Parts ___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8 ___ 408 Display Screens ___ 408.1 ___ 408.2 ___ 408.3 ___ 409 Status Indictors ___ 409.1 ___ 410 Color Coding ___ 410.1 ___ 411 Audible Signals ___ 411.1 ___ 412 ICT with Two-Way Communication ___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___ 412.8 ___ 413 Closed Caption Processing Technologies ___ 413.1 ___ 414 Audio Description Processing Technologies ___ 414.1 ___ 415 User Controls for Captions and Audio Descriptions ___ 415.1 _X_ Chapter 5: Software _X_ 501 General _X_ 501.1 _X_ 502 Interoperability with Assistive Technology _X_ 502.1 _X_ 502.2 _X_ 502.3 _X_ 502.4(A-G) _X_ 503 Applications

_X_ 503.1 _X_ 503.2 _X_ 503.3 _X_ 503.4 _X_ 504 Authoring Tools _X_ 504.1 _X_ 504.2 _X_ 504.3 _X_ 504.4 _X_ Chapter 7: Referenced Standards _X_ 701 General _X_ 701.1 _X_ 702 Incorporation by Reference _X_ 702.1 ___ 702.2 _X_ 702.3 _X_ 702.4 ___ 702.5 ___ 702.6 ___ 702.7 ___ 702.8 ___ 702.9 _X_ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X_ Chapter 3: Functional Performance Criteria _X_ 301 General _X_ 301.1 _X_ 302 Functional Performance Criteria _X_ 302.1 _X_ 302.2 _X_ 302.3 _X_ 302.4 _X_ 302.5 _X_ 302.6 _X_ 302.7 _X_ 302.8 _X_ 302.9

(End of Clause)

Attachment 3

Representations and Certifications

52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment (Nov 2021)

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it “does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument” in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services— Representation, or in paragraph (v)(2)(i) of the provision at 52.212-3, Offeror Representations and Certifications- Commercial Products and Commercial Services. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it “does not use covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services” in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

a. Definitions. As used in this provision-

Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204- 25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

b. Prohibition. (1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to—

a. Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

b. Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-

232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a federal contract. Nothing in the prohibition shall be construed to—

a. Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

b. Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for “covered telecommunications equipment or services.”

(d) Representations. The Offeror represents that—

(1) It [ ] will, [ ] will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation. The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds “will” in paragraph (d)(1) of this section; and

(2) After conducting a reasonable inquiry, for purposes of this representation, the Offeror represents that—

It [ ] does, [ ] does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services. The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds “does” in paragraph (d)(2) of this section.

Disclosures. (1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded “will” in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment—

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item…